3050 to 3250 Hardware Upgrade

Reply
Highlighted

3050 to 3250 Hardware Upgrade

Hi,

I will be upgrading my 3050 firewall (managed by panorama) to a 3250 soon and am curious if there are any best practices guides out there moving from a 3050 to a 3250?

 

Thanks!

Tags (1)

Accepted Solutions
Highlighted
L1 Bithead

Hello,

Recently went through this same upgrade, I could not find a document catered specifically for a migration between these two particular devices, but the basics should mostly be the same as moving between other PA hardware platforms. I used this guide for putting together my basic plan. 

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migrati...

 

A couple of quick notes, if you run HA, the port configs vary slightly, the 3250's do not have a dedicated copper HA2 port but instead move towards the HSCI port for HA2.  

 

Additionally, if you follow the advice of ensuring they are on the exact same panOS release prior to moving over the config, make sure its a preferred release I made the mistake of downgrading my 3250's to a panOS release matching my 3050's prior to the switch over and got hit by this bug in the next release, it was a rough day.

 

sellington_0-1600183932151.png

 

View solution in original post


All Replies
Highlighted
L3 Networker

Hi,

 

i do not think there is an offical guide for upgrading between PA Hardware Firewalls.

My advice most important both Firewalls should have same PAN-OS version when you export and import Config.

 

 

Highlighted
L1 Bithead

Hello,

Recently went through this same upgrade, I could not find a document catered specifically for a migration between these two particular devices, but the basics should mostly be the same as moving between other PA hardware platforms. I used this guide for putting together my basic plan. 

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migrati...

 

A couple of quick notes, if you run HA, the port configs vary slightly, the 3250's do not have a dedicated copper HA2 port but instead move towards the HSCI port for HA2.  

 

Additionally, if you follow the advice of ensuring they are on the exact same panOS release prior to moving over the config, make sure its a preferred release I made the mistake of downgrading my 3250's to a panOS release matching my 3050's prior to the switch over and got hit by this bug in the next release, it was a rough day.

 

sellington_0-1600183932151.png

 

View solution in original post

Highlighted

Thanks for the warning. I was planning on doing the same thing and would have hit that bug.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!